rust-agent-runtime 0.1.2

What's Changed

• docs: point recorded commit IDs at the rewritten history; explain AGY by @rustfuture in #6
• docs: make the README readable at a glance by @rustfuture in #7
• docs: correct control-run identity and confirmation-run reporting by @rustfuture in #8
• docs: correct and explain the first task workflow by @rustfuture in #10
• Split agent and provider modules behind a provider trait by @rustfuture in #9
• Display project artwork in the README by @rustfuture in #11
• Show the status as a note and fold reference sections by @rustfuture in #12
• Check README and docs links and anchors in CI by @rustfuture in #13
• Add a styled demo of one task going through the real runtime by @rustfuture in #14
• Run the demo with cargo run in the quick start by @rustfuture in #15
• Publish prebuilt binaries with each release by @rustfuture in #16

Full Changelog: v0.1.1...v0.1.2

Rust Agent Runtime v0.1.1

First reviewed public portfolio release.

Included

• Durable task state with resumable worker execution.
• Bounded subprocess and model-provider output.
• Cancellation propagation and an explicit post-edit verification gate.
• Independent fixture evaluation with primary and confirmation runs reported separately.

Verification

• GitHub Actions passed the Rust, MSRV, and 36-control deterministic suites.
• The local Rust suite passed 47 tests.
• Current tree and full Git history passed a gitleaks scan with no findings.

See the README and SECURITY.md for scope and security boundaries.

0.1.0 — bounded agent runtime candidate

Release notes

0.1.0 — runtime core candidate

• Durable append-only task states and attempt counts.
• Idempotent enqueue and restart recovery.
• Deterministic queued-task selection.
• Allowlisted, workspace-contained process execution.
• Timeout, cancellation, and bounded stdout/stderr capture.
• Persisted succeeded, failed, and cancelled outcomes.
• Durable metadata-only command traces and restart reconciliation.
• Explicit bounded retry for failed tasks.
• Provider-neutral structured decisions and a step-bounded agent loop.
• AGY/Gemini 3.8 Flash Low adapter with usage/latency metadata and a real smoke example.
• Bounded workspace read/exact-replacement actions and a real failing-to-passing Rust fixture evaluation.
• Opt-in macOS Seatbelt execution that denies network and writes outside the workspace, covered by a real subprocess test.
• Terminal enqueue/cancel/status/watch interface with non-mutating observation and stricter terminal-state transitions.
• Real AGY NDJSON response streaming with callback delivery and final usage metadata.
• Post-edit verification debt that prevents an untested model edit from being reported complete.
• Unix process-group termination for timeout/cancellation, covered by a descendant-process test.

No Linux isolation backend, graphical UI, or automatic merge is included in this candidate. Process-group termination does not undo side effects that occurred before timeout. Exactly-once external side effects are not guaranteed if the process dies before a trace is synced; adapters must supply idempotency or transactions. Live AGY calls are not part of CI.